Back to Database
Status published
Medium
CVE-2016-7142
The m_sasl module in InspIRCd before 2.0.23, when used with...
Vulnerability Description
The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-7142
Credits & Attribution
No credits recorded in the NVD database.
References
More from inspircd
View All →CVE-2021-33586
InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able...
Medium
4.3
CVE-2020-25269
An issue was discovered in InspIRCd 2 before 2.0.29 and...
Medium
6.5
CVE-2019-20918
An issue was discovered in InspIRCd 3 before 3.1.0. The...
Medium
6.5
CVE-2019-20917
An issue was discovered in InspIRCd 2 before 2.0.28 and...
Medium
6.5
CVE-2015-6674
Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1...
Critical
9.8
Affected Vendor
inspircd
View all reports →Affected Software
inspircd, debian linux
Vulnerable Versions:
0, 8.0
Timeline
Official Publish:
September 26th, 2016
Last Modified:
August 6th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.